NVD

Id
29098  
Name
CVE-2014-0182  
Description
Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config length in a savevm image.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-04  
Modified Date
2014-11-05  
Seq
2014-0182  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153804 29098 CVE-2014-0182 http://git.qemu.org/?p=qemu.git;a=commitdiff;h=a890a2f9137ac3cf5b607649e66a6f3a5512d8dc  View
153805 29098 CVE-2014-0182 FEDORA-2014-6288  View
153806 29098 CVE-2014-0182 [Qemu-stable] 20140723 [ANNOUNCE] QEMU 1.7.2 Stable released  View
153807 29098 CVE-2014-0182 RHSA-2014:0743  View
153808 29098 CVE-2014-0182 RHSA-2014:0744  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16349 JVNDB-2014-005224 QEMU の hw/virtio/virtio.c の virtio_load 関数におけるヒープベースのバッファオーバーフローの脆弱性 QEMU の hw/virtio/virtio.c の virtio_load 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-0182 67583 CVE-2014-0182 29098 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005224.html 2014-07-23 2014-11-06 View